Re: [whatwg/fetch] Allow connection reuse for request without credentials when TLS client auth is not in use (#341)

Getting back to this after 7 years.. ⏳ 
My [comments](https://github.com/whatwg/fetch/issues/341#issuecomment-301009698) regarding the benefits of changing the current spec are still largely valid, other than (2) given that server push is no longer a practical consideration.
In short, a single connection improves things compared to two connections as it requires only a single connection establishment process, doesn't require two separate slow-starts, and can avoid contention on bandwidth.

@MattMenke2 - can you elaborate on how developers may be relying on current behavior?

In terms of benefits, I can see this improving some very common scenarios:
* example.com loading a mix of anonymous and credentialed resources from cdn.com, which has no cookies set for this partition, or where cross-site cookies are blocked.
  - we can use a single connection to cdn.com without leaking information.
* example.com loading a same-origin credentialed request which does not redirect across origins.
  - we can use a single connection to example.com.


-- 
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/341#issuecomment-2133649736
You are receiving this because you are subscribed to this thread.

Message ID: <whatwg/fetch/issues/341/2133649736@github.com>

Received on Monday, 27 May 2024 14:58:18 UTC